20 lines
977 B
Markdown
20 lines
977 B
Markdown
# GovOPlaN Voting
|
|
|
|
`govoplan-voting` owns governed ballot definitions, frozen electorate
|
|
snapshots, ballot casting and replacement, deterministic tallying, result
|
|
certification, challenges, annulment, and provider evidence.
|
|
|
|
The native `recorded` assurance profile is auditable but not secret: active
|
|
ballots are stored so that a result can be reconstructed. Confidential,
|
|
secret, and externally certified profiles fail closed unless an explicit
|
|
`voting.provider.<provider>` capability is installed. Providers return only
|
|
aggregate results and evidence; raw secret ballots and provider credentials
|
|
do not enter the Voting database.
|
|
|
|
Committee and other modules retain their deliberation or business context and
|
|
refer to Voting ballots through the `voting.ballots` capability. Informal
|
|
preference and availability collection remains in `govoplan-poll`.
|
|
|
|
See [the domain and assurance boundary](docs/VOTING_DOMAIN.md) for operations,
|
|
security, recovery, and integration details.
|